Least Overhead Ingestion to OpenSearch via Kinesis
Short answer
A Use Amazon Kinesis Data Firehose and an AWS Lambda function to transform the data and deliver the transformed data to OpenSearch Service.
Question
Key Takeaways
The core concept is choosing a fully managed service (Firehose) over self-managed components (Logstash, KCL) to minimize infrastructure management tasks.
This question evaluates the optimal AWS architecture for streaming data ingestion with minimal operational overhead. The correct solution leverages Amazon Kinesis Data Firehose combined with an AWS Lambda function to handle transformation and delivery to Amazon OpenSearch Service.
Common mistake: Many candidates choose Logstash (Option B) because it is commonly associated with the ELK stack for Elasticsearch/OpenSearch, failing to recognize that managing Logstash instances requires significantly more operational effort than using the managed Firehose service.
Expert Analysis
Why the Answer Is Correct
Amazon Kinesis Data Firehose is a fully managed service designed specifically for loading streaming data into AWS destinations like S3, Redshift, Splunk, and OpenSearch. It automatically scales to match the throughput of your data and requires no ongoing administration. By attaching an AWS Lambda function to Firehose, you can perform real-time data transformation before delivery. This combination offers the least operational overhead because AWS manages the underlying servers, scaling, and error handling.
Why the Other Options Are Wrong
Option B (Logstash) is a powerful open-source tool, but running Logstash pipelines typically requires provisioning and managing EC2 instances or Kubernetes clusters, which introduces significant operational overhead compared to the serverless nature of Firehose. Option C is incorrect because the Kinesis Agent is primarily used for log shipping from on-premises or EC2 sources to Kinesis Streams/Delivery Streams, not as a transform-and-deliver mechanism in this context, and calling it via Lambda is architecturally unsound. Option D (Kinesis Client Library) requires developers to build and maintain their own consumer applications to process records, resulting in high operational overhead and complexity.
Community Comment Notes
Community feedback was split between A and B. Some users argued for Logstash due to its familiarity in the ELK ecosystem, as seen in comments discussing prebuilt filters. However, others correctly identified Firehose as the superior choice for 'least operational overhead' because it is a managed service. One commenter noted that Firehose 'automatically scale[s] to match the throughput... and requires no ongoing administration,' which directly addresses the exam's constraint.
Exam Strategy
When an exam question asks for the 'LEAST operational overhead' involving data ingestion and transformation, prioritize fully managed AWS services (like Firehose, Glue, Lambda) over self-managed tools (like Logstash, EMR, or custom code). Always compare the management burden of the infrastructure required for each option.
Frequently Asked Questions
Why is Logstash not the best choice for least overhead?
Can I use Lambda alone without Firehose?
Community Votes
50% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 5 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 5
-
matt200 👍 3 Answered AOption A: Use Amazon Kinesis Data Firehose and an AWS Lambda function to transform the data and deliver the transformed data to OpenSearch Service is the best choice for achieving the least operational overhead. Kinesis Data Firehose is a managed service that automates the data ingestion process, scales seamlessly, and integrates directly with OpenSearch Service, minimizing the need for manual intervention and infrastructure management.
-
maddyr 👍 2 Answered BLogstash is a lightweight, open-source, server-side data processing pipeline that allows you to collect data from various sources, transform it on the fly, and send it to your desired destination. It is most often used as a data pipeline for Elasticsearch, an open-source analytics and search engine https://aws.amazon.com/what-is/elk-stack/#seo-faq-pairs#what-is-the-elk-stack
-
Evan_Lin 👍 2 Answered Bwhy not B? Logstash is an open-source data ingestion tool that allows you to collect data from various sources, transform it, and send it to your desired destination. With prebuilt filters and support for over 200 plugins, Logstash allows users to easily ingest data regardless of the data source or type.
-
mzansikiller 👍 1Amazon Kinesis Data Firehose is a fully managed service that reliably loads streaming data into data lakes, data stores and analytics services like OpenSearch Service. It can automatically scale to match the throughput of your data and requires no ongoing administration. Answer A
-
aragon_saa 👍 1 Answered AAnswer is A
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All DEA-C01 Questions
Access 100 questions with complete answers and detailed explanations.
View Full DEA-C01 Practice Test →